Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.mft (raw, json)
Hash identifier: ZQgaNDPCNnRV0CURyRpBJEIpdzIdr/sLIikjAS/RCEc=
Subject key identifier: 5E:7E:89:BD:1B:97:07:FB:40:85:E3:0E:A2:F3:9D:DB:0E:3A:7A:99
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 0194BD4E94687382D44BB7D56BD60ACA078A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 9MCqez48v_iCYq3ZKzOeNQUc4aA.crl (hash: uyuRiBAbtVYzZmIQ+ciV9QuwAvLoyZcz14T3Xh6zXC4=)
2: DHjHu0kvW9aDO9jDZZ4EQHc7D7I.roa (hash: la12cckTSrBNBcv/9mFKk31o5d6TpPQuh7CtHumZ2Uo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:94:68:73:82:d4:4b:b7:d5:6b:d6:0a:ca:07:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=5e7e89bd1b9707fb4085e30ea2f39ddb0e3a7a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:b4:16:00:f3:9a:1b:3c:9d:d6:6b:49:6f:
4e:67:51:8f:53:c9:78:ad:c4:04:27:88:48:ab:c0:
25:bb:72:53:22:44:db:cf:d4:42:28:b6:4d:f2:b7:
56:7c:96:b6:21:b3:68:d3:bf:79:41:ce:54:af:74:
5b:f5:87:c3:85:d2:1d:f9:70:84:ef:10:a8:98:9a:
d6:f4:03:84:42:c7:b3:58:56:53:48:9b:33:e0:d4:
9d:56:21:3a:a4:6e:23:c9:62:57:52:2a:a3:05:d5:
b8:f2:4d:08:29:93:34:14:74:fb:71:00:11:9b:f4:
4e:fa:e9:45:31:a2:84:01:97:94:63:03:69:bf:8c:
48:2b:1a:56:b6:a0:40:2a:47:c7:be:9e:66:6a:67:
c1:82:ed:28:7b:0f:59:b8:09:09:a1:1b:58:b8:d6:
35:4b:df:f8:bb:11:50:4a:8b:9e:57:b1:9d:4a:2c:
87:91:38:ae:90:6e:69:17:ad:4c:bc:06:40:cc:21:
c6:e5:af:b6:33:07:ea:59:8c:c3:b6:d8:5c:65:77:
52:42:27:ab:a9:80:75:06:f9:5d:19:e4:94:a5:1a:
16:12:c1:dd:ea:9a:e9:12:0a:ec:67:82:bf:38:e7:
4b:a8:ee:b5:8c:35:c1:86:ae:ee:ce:17:af:ea:98:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:89:BD:1B:97:07:FB:40:85:E3:0E:A2:F3:9D:DB:0E:3A:7A:99
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:ca:0a:90:1b:2e:af:b5:b5:ce:e5:25:0b:9e:2d:51:ec:
8d:68:55:36:34:70:a2:b4:ec:f1:b0:c2:6f:1b:8f:b7:ca:d1:
92:ac:1d:16:9a:d6:0a:ef:2b:72:b6:2c:c9:7c:14:60:f3:c6:
79:f8:26:ff:31:13:9f:05:11:7f:04:f4:8c:99:c4:2a:6b:73:
c6:d1:42:c2:74:8d:9c:f8:4c:3d:fd:80:3f:c0:fb:51:35:c3:
00:d5:c3:44:90:7b:5c:9d:92:1b:35:36:10:2d:45:81:03:bc:
bc:7c:0e:1e:01:e1:48:29:a9:f1:8f:60:9d:b8:ff:02:c3:b5:
93:18:2c:e9:43:c8:3e:eb:18:51:62:65:e0:cd:c4:4d:4e:18:
bf:90:3f:fb:bf:cd:48:5a:dc:3b:23:0e:3d:b1:fa:c7:1f:3e:
2e:2e:69:23:dc:23:ad:47:cc:6c:11:33:10:90:a8:f7:b7:56:
cd:e4:e5:fa:12:96:ff:ee:1b:58:71:ab:17:04:9b:68:3b:3a:
20:5f:84:ec:bf:f4:35:7a:04:62:77:e5:2c:ec:f5:8c:29:5c:
17:f7:57:7e:cf:06:73:9a:75:9d:15:c6:e6:59:27:f7:70:87:
8b:59:fa:4f:58:05:a7:68:1c:e1:c0:72:3b:9b:1b:e2:fa:26:
f3:b0:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:56 2025 by rpki-client